how and where to add TLS to a tonic GRPC server?

[tdelabro]

I'm building a gRPC server using tonic.

I would like to have it use HTTPS. I think I can do this using https://docs.rs/tonic/latest/tonic/transport/struct.Server.html#method.tls_config, but people I talked with also told me that I can just not do that, and enforce HTTPS at the infra provider level (AWS, google cloud).

I would be curious to have advice, feedback, and an explanation on this matter